configure-notifications
Warn
Audited by Socket on Jun 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the native Telegram/Discord/Slack portions are coherent and mostly benign, but the same skill also enables arbitrary third-party webhook delivery and local CLI execution, making its actual capability broader than its stated notification-configuration purpose. No malware or supply-chain installer behavior is evident, but the expanded custom integration surface and plaintext secret storage create medium security risk.
Confidence: 87%Severity: 64%
Audit Metadata